1 dépôt
Awesome GitHub RepositoriesLoopback-Only Network Isolation
Gives the sandbox its own network namespace with only a loopback device, cutting off all external network connectivity.
Distinct from Network Namespace Virtualization: Distinct from Network Namespace Virtualization: focuses on providing only a loopback device for network isolation, not general network namespace creation.
Explore 1 awesome GitHub repository matching devops & infrastructure · Loopback-Only Network Isolation. Refine with filters or upvote what's useful.
Awesome Loopback-Only Network Isolation GitHub Repositories
Trouvez les meilleurs dépôts grâce à l'IA.Nous recherchons les dépôts les plus pertinents grâce à l'IA.
- containers/bubblewrap
containers/bubblewrap
5,839Voir sur GitHubBubblewrap is a Linux sandbox runner that creates lightweight, isolated execution environments for running untrusted applications. It combines Linux user, mount, network, PID, and UTS namespaces with seccomp-BPF system call filtering to restrict filesystem, network, process, and inter-process communication access. The project provides comprehensive process isolation by giving each sandbox its own private tmpfs root with selective bind-mounts, a separate network stack containing only a loopback interface, an independent process ID space, and remapped user and group identifiers. It applies secc
Gives the sandbox its own network namespace with only a loopback device, cutting off all external network connectivity.
Clinux-containersuser-namespaces
